CVE-2005-1043

2005-04-1404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

php

cve

denial of service

memory consumption

crash

security vulnerability

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.5%

JSON

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

CPENameOperatorVersion
php:phpphpeq4.3.9
conectiva:linuxconectiva linuxeq9.0
sgi:propacksgi propackeq3.0
php:phpphpeq4.3.4
php:phpphpeq4.3.0
php:phpphpeq4.3.6
php:phpphpeq4.3.7
php:phpphpeq4.3.2
php:phpphpeq4.3.3
php:phpphpeq4.3.1

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
conectiva:linux	conectiva linux	eq	9.0
sgi:propack	sgi propack	eq	3.0
php:php	php	eq	4.3.4
php:php	php	eq	4.3.0
php:php	php	eq	4.3.6
php:php	php	eq	4.3.7
php:php	php	eq	4.3.2
php:php	php	eq	4.3.3
php:php	php	eq	4.3.1